| commit | 2068626d1345f23fd2b926d834d4f74b37cd7134 | [log] [tgz] |
|---|---|---|
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | Tue Jun 27 16:10:39 2017 -0400 |
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | Wed Nov 08 15:16:36 2017 -0500 |
| tree | ef05b137a8c28a25f7b262214ff60a3d418e43ea | |
| parent | 46cdc6d533c925c7477feea7caa404466bac7ac8 [diff] |
ima: don't remove the securityfs policy file The securityfs policy file is removed unless additional rules can be appended to the IMA policy (CONFIG_IMA_WRITE_POLICY), regardless as to whether the policy is configured so that it can be displayed. This patch changes this behavior, removing the securityfs policy file, only if CONFIG_IMA_READ_POLICY is also not enabled. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>